Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e73ec9-6e98-4972-8b83-8577bb93e83e/1/xMJjtaUxpoweql7VCoZ_sGutngE.roa
File: xMJjtaUxpoweql7VCoZ_sGutngE.roa (raw, json)
Hash identifier: KMgfVrJqTtKrAISeKXuHjoqg9A0h3cch6gTjeAJjJXA=
Subject key identifier: C4:C2:63:B5:A5:31:A6:8C:1E:AA:5E:D5:0A:86:7F:B0:6B:AD:9E:01
Certificate issuer: /CN=138f436b5eafec8835cb2f2ffbfedb51b08c4f3d
Certificate serial: 0261E0FA
Authority key identifier: 13:8F:43:6B:5E:AF:EC:88:35:CB:2F:2F:FB:FE:DB:51:B0:8C:4F:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E49Da16v7Ig1yy8v-_7bUbCMTz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e73ec9-6e98-4972-8b83-8577bb93e83e/1/xMJjtaUxpoweql7VCoZ_sGutngE.roa
Signing time: Sat 01 Jan 2022 05:00:34 +0000
ROA not before: Sat 01 Jan 2022 05:00:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6729
IP address blocks: 185.225.196.0/24 maxlen: 24
2a10:a480::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39969018 (0x261e0fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=138f436b5eafec8835cb2f2ffbfedb51b08c4f3d
Validity
Not Before: Jan 1 05:00:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c4c263b5a531a68c1eaa5ed50a867fb06bad9e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5d:cc:b4:1b:5a:12:a2:33:41:05:70:c8:5c:
81:5a:ef:9c:31:33:a2:98:07:a8:d7:39:fe:d0:0f:
7e:87:18:b6:ca:09:43:f9:92:d6:2c:16:b1:9e:85:
e8:cc:54:9d:c1:2e:96:b0:06:42:50:cf:32:34:61:
33:a8:00:b8:ee:58:4e:31:30:62:cf:a9:9d:97:1d:
08:cb:e1:c5:b2:22:b1:9b:4f:81:0d:ce:8e:69:8d:
24:ee:81:5f:59:9c:51:3b:50:52:af:c1:dd:e3:07:
b2:8d:90:8a:21:19:e3:d7:2b:6f:33:6c:fa:c6:af:
e5:64:2c:1e:a9:c5:d2:ac:ec:69:98:ea:26:11:2e:
35:74:93:a9:0d:eb:1f:0c:2d:c2:b4:6e:79:b8:59:
27:81:c5:ba:77:b9:56:15:bc:aa:a8:41:05:cc:a3:
bb:ee:d2:0f:2a:00:f5:83:be:51:ed:71:b3:76:f6:
1b:52:de:85:31:05:fc:a5:60:fb:f0:2f:04:c4:b8:
c4:4b:92:02:f4:48:a3:df:fc:08:e5:7f:09:a3:99:
e8:f9:1d:6c:75:15:de:42:41:27:69:a3:c9:21:63:
93:2f:99:29:81:59:3e:ac:ea:24:f3:f3:d4:82:6e:
50:65:e1:3d:32:48:8e:21:de:72:e7:79:95:02:69:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C2:63:B5:A5:31:A6:8C:1E:AA:5E:D5:0A:86:7F:B0:6B:AD:9E:01
X509v3 Authority Key Identifier:
keyid:13:8F:43:6B:5E:AF:EC:88:35:CB:2F:2F:FB:FE:DB:51:B0:8C:4F:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E49Da16v7Ig1yy8v-_7bUbCMTz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e73ec9-6e98-4972-8b83-8577bb93e83e/1/xMJjtaUxpoweql7VCoZ_sGutngE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e73ec9-6e98-4972-8b83-8577bb93e83e/1/E49Da16v7Ig1yy8v-_7bUbCMTz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.196.0/24
IPv6:
2a10:a480::/29
Signature Algorithm: sha256WithRSAEncryption
78:20:dc:fe:82:70:03:88:69:1e:fe:38:cf:91:ee:0c:78:94:
28:a1:27:12:4d:cf:28:b6:17:6d:63:e5:e9:a7:8d:cd:31:41:
db:90:ac:af:ee:bd:ad:ad:2a:50:35:c2:48:4e:98:89:5e:e9:
dd:b0:fb:99:1b:a8:74:65:0c:1e:e7:69:e1:74:aa:48:77:da:
be:52:00:28:f9:ea:61:92:38:72:8a:fb:f9:ef:8f:c0:9a:34:
58:3b:1b:e2:39:e2:89:bb:35:b4:a1:d9:e1:5c:cc:ec:05:7d:
f5:56:5a:dc:fb:40:70:0f:a2:f7:48:04:20:4c:a1:a1:2a:19:
64:d2:ce:37:59:2f:7b:31:35:76:eb:52:67:3e:22:5c:9b:f0:
33:d7:ec:8d:fa:25:65:1e:42:57:4c:59:94:ac:8f:ac:bc:ae:
61:f7:9d:1a:5f:b1:a2:ed:0b:a8:d5:df:d8:94:af:9f:40:94:
35:0f:df:73:2b:2e:e9:fa:be:12:14:8d:06:8d:18:ed:72:ba:
55:d6:f6:59:7b:75:0b:e1:13:97:a6:77:44:76:dd:34:9e:5e:
3e:ea:16:d7:3f:50:dd:91:7f:d5:5d:4a:7d:d7:0c:09:6b:09:
e2:d1:ef:5e:dd:a1:cc:13:40:65:49:1c:95:3d:24:96:1e:fd:
d9:b1:9d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:43 2024 by rpki-client on console-ams.rpki-client.org